From 5d1d18d4dd9789f650fd62078257890cd1033e25 Mon Sep 17 00:00:00 2001
From: adityagajbhiye9 <133367448+adityagajbhiye9@users.noreply.github.com>
Date: Tue, 30 Jul 2024 12:37:03 +0530
Subject: [PATCH 1/2] for release 24.08

- dependabot issues fix.
- docker build image updated.
---
 CHANGELOG.md | 8 +++++++-
 Dockerfile   | 2 +-
 package.json | 2 +-
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 800290e6..3ddc9125 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,11 @@
 # Changelog
 
 New features, fixed bugs, known defects and other noteworthy changes to each release of the Simple Data Exchanger Frontend.
+
+## [2.4.2] - 2024-07-30
+- dependabot issues fix for release 24.08.
+- docker build image updated to latest.
+
 ## [2.4.1] - 2024-05-24
 -  Bumped version for release 24.05 to match with backend version .
   
@@ -270,7 +275,8 @@ New features, fixed bugs, known defects and other noteworthy changes to each rel
 - Compliance with Catena-X Guidelines
 - Integration with Digital Twin registry service.
 
-[unreleased]: https://github.com/eclipse-tractusx/managed-simple-data-exchanger-frontend/compare/v2.4.1...main
+[unreleased]: https://github.com/eclipse-tractusx/managed-simple-data-exchanger-frontend/compare/v2.4.2...main
+[2.4.2]: https://github.com/eclipse-tractusx/managed-simple-data-exchanger-frontend/compare/v2.4.1...v2.4.2
 [2.4.1]: https://github.com/eclipse-tractusx/managed-simple-data-exchanger-frontend/compare/v2.4.0...v2.4.1
 [2.4.0]: https://github.com/eclipse-tractusx/managed-simple-data-exchanger-frontend/compare/v2.3.7...v2.3.8
 [2.3.7]: https://github.com/eclipse-tractusx/managed-simple-data-exchanger-frontend/compare/v2.3.6...v2.3.7
diff --git a/Dockerfile b/Dockerfile
index eb89bc52..c71d2d01 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,7 +18,7 @@
 # SPDX-License-Identifier: Apache-2.0
 ################################################################################
 # => Build container
-FROM node:18.19.0-alpine3.18 as builder
+FROM node:18.20.4-alpine3.20 as builder
 
 WORKDIR /app
 
diff --git a/package.json b/package.json
index ab9c8405..ba1f46cf 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "managed-simple-data-exchanger-frontend",
-  "version": "2.4.1",
+  "version": "2.4.2",
   "description": "Managed Simple Data Exchanger Frontend",
   "license": "Apache-2.0",
   "type": "module",

From 60d152b279227335d8a960e9511c0c8a6f55ab9a Mon Sep 17 00:00:00 2001
From: adityagajbhiye9 <133367448+adityagajbhiye9@users.noreply.github.com>
Date: Tue, 30 Jul 2024 12:43:15 +0530
Subject: [PATCH 2/2] updated the workflow step version.

---
 .github/workflows/dependencies.yml | 2 +-
 .github/workflows/trivy-scan.yml   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
index 6064d050..94ff3cdc 100644
--- a/.github/workflows/dependencies.yml
+++ b/.github/workflows/dependencies.yml
@@ -68,7 +68,7 @@ jobs:
         if: steps.dependencies-changed.outputs.changed == 'true'
 
       - name: Upload DEPENDENCIES file
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           path: DEPENDENCIES
         if: steps.dependencies-changed.outputs.changed == 'true'
diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml
index 9f29cbba..97c717fa 100644
--- a/.github/workflows/trivy-scan.yml
+++ b/.github/workflows/trivy-scan.yml
@@ -43,7 +43,7 @@ jobs:
 
     steps:
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@0.20.0
+        uses: aquasecurity/trivy-action@0.24.0
         with:
           image-ref: "tractusx/managed-simple-data-exchanger-frontend:latest" # Pull image from Docker Hub and run Trivy vulnerability scanner
           format: "sarif"